$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: duf8m1UliZHGrwEb9YkeaTynUy5fpM2eE1KAW82HqvM= Subject key identifier: 15:E0:09:4C:7B:8D:A3:9D:36:15:D6:02:6A:F0:D2:38:DE:CB:85:59 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019D9A3E35749232374B59FA193E98D007AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 02CA Signing time: Fri 17 Apr 2026 07:01:01 +0000 Manifest this update: Fri 17 Apr 2026 07:01:01 +0000 Manifest next update: Sat 18 Apr 2026 07:01:01 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: 0mTfuA58LokmWitHpms6sTxtilfsqdbZtqXKiGXyDes=) 3: IqdHlUJa3uvZPr2-m3v2S7HrJE0.roa (hash: 0dizv8L3FD2g5DMEu7DpHeZSiKDU38+rdYF5Csc3+Wk=) 4: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 5: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 6: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 7: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 8: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 9: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 10: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 11: y7h0yERjcdv4epRhEuweuKMboIE.roa (hash: 06y4kV4+l/1tvhklUQAmaFlpGaz382dT//BZSxQo5qA=) 12: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3e:35:74:92:32:37:4b:59:fa:19:3e:98:d0:07:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Apr 17 07:01:01 2026 GMT Not After : Apr 18 07:01:01 2026 GMT Subject: CN=15e0094c7b8da39d3615d6026af0d238decb8559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:69:b6:0b:75:4e:ab:b2:2f:53:2a:b7:80: 50:fa:8a:78:44:93:5a:a6:2e:93:8f:72:ac:d3:18: d6:af:43:fb:c1:77:66:01:d5:b1:7d:ae:7e:64:a3: 55:a0:49:e5:c9:3c:ce:26:fd:bb:de:16:55:f8:65: 1f:5c:97:ac:f7:67:b7:52:d1:66:df:7b:8e:bb:38: b1:bb:e4:1a:d3:f9:b7:e9:75:25:fa:93:85:82:1a: f3:9e:db:f5:57:c6:18:6b:17:4b:38:95:ef:ca:61: e9:b8:73:9b:e8:d5:95:15:56:a9:30:34:ad:76:73: 71:ee:86:4b:26:63:cd:6f:40:0e:2b:87:f9:88:e8: 99:f7:98:80:73:56:5b:e4:8d:02:24:12:45:ea:d7: 50:b4:87:1b:e1:6b:c8:9e:6a:f7:c1:c0:ae:21:61: 0e:d2:69:6d:8b:4d:fd:68:60:7f:2a:db:dc:dc:6e: 78:f9:5c:66:99:0b:fd:7f:ff:34:4f:b5:24:eb:b6: ce:c7:41:2e:a3:e8:a0:9a:88:e7:56:1f:1a:ed:83: a8:1c:4f:eb:d2:31:6b:66:12:11:59:d0:3c:aa:43: 1c:f7:1b:df:f9:d3:ec:e6:91:56:51:f2:2f:1a:6c: a2:db:c8:58:c0:a7:a9:17:8a:a9:50:45:37:10:5a: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:09:4C:7B:8D:A3:9D:36:15:D6:02:6A:F0:D2:38:DE:CB:85:59 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:10:e8:0c:ac:73:b5:21:86:23:0e:80:23:1b:e4:db:e5:83: c0:e6:79:45:48:d5:3e:1e:b2:4f:31:64:9c:13:8c:af:38:32: 91:a4:86:fd:fb:27:2a:1e:49:ae:2c:a3:20:0e:4b:c4:96:79: 71:ee:6d:c9:c3:78:5a:80:99:95:7f:1d:e3:44:25:e6:7f:36: 90:74:cd:d0:5b:44:33:bd:15:b2:c0:7f:68:6f:2b:56:9e:61: db:9c:7a:96:66:83:d6:30:f3:88:82:ba:26:82:e0:db:c3:4e: 3e:f5:57:38:1f:92:9e:02:ac:db:14:0d:41:73:c2:ac:f2:8b: 56:e7:37:0c:c2:c4:10:f2:57:98:37:dd:aa:ee:c1:0e:0e:ad: 37:b2:9a:96:01:d2:d2:41:6f:b1:09:17:4c:65:0a:2c:20:e5: 4c:dd:cd:6d:8c:5d:0e:f3:5d:57:44:4f:fe:d0:dd:68:d5:d1: f2:08:dc:97:bf:40:3c:bc:a9:94:6e:6f:61:7b:53:f4:51:87: 6d:be:da:d1:10:0f:f5:58:32:1a:9c:de:6d:a8:21:ec:85:31: 4d:41:4f:42:fc:19:66:cf:53:16:79:3d:23:ee:7e:ab:c9:86: 76:dc:eb:d1:30:d2:00:7b:e0:ee:63:47:37:41:d5:49:74:c5: 63:e8:bf:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPjV0kjI3S1n6GT6Y0AerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwNDE3MDcwMTAxWhcNMjYwNDE4MDcwMTAxWjAzMTEwLwYDVQQD EygxNWUwMDk0YzdiOGRhMzlkMzYxNWQ2MDI2YWYwZDIzOGRlY2I4NTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rlptgt1TquyL1Mqt4BQ+op4RJNa pi6Tj3Ks0xjWr0P7wXdmAdWxfa5+ZKNVoEnlyTzOJv273hZV+GUfXJes92e3UtFm 33uOuzixu+Qa0/m36XUl+pOFghrzntv1V8YYaxdLOJXvymHpuHOb6NWVFVapMDSt dnNx7oZLJmPNb0AOK4f5iOiZ95iAc1Zb5I0CJBJF6tdQtIcb4WvInmr3wcCuIWEO 0mlti039aGB/Ktvc3G54+VxmmQv9f/80T7Uk67bOx0Euo+igmojnVh8a7YOoHE/r 0jFrZhIRWdA8qkMc9xvf+dPs5pFWUfIvGmyi28hYwKepF4qpUEU3EFotoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXgCUx7jaOdNhXWAmrw0jjey4VZMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehDoDKxz tSGGIw6AIxvk2+WDwOZ5RUjVPh6yTzFknBOMrzgykaSG/fsnKh5JriyjIA5LxJZ5 ce5tycN4WoCZlX8d40Ql5n82kHTN0FtEM70VssB/aG8rVp5h25x6lmaD1jDziIK6 JoLg28NOPvVXOB+SngKs2xQNQXPCrPKLVuc3DMLEEPJXmDfdqu7BDg6tN7KalgHS 0kFvsQkXTGUKLCDlTN3NbYxdDvNdV0RP/tDdaNXR8gjcl79APLyplG5vYXtT9FGH bb7a0RAP9VgyGpzebagh7IUxTUFPQvwZZs9TFnk9I+5+q8mGdtzr0TDSAHvg7mNH N0HVSXTFY+i/YA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:37:07 2026 by rpki-client